ipsec: de-duplicate crypto op prepare